CVE-2019-0254

CVE-2019-0254 affects SAP Disclosure Management (before version 10.1 Stack 1301). The issue is a Cross-Site Scripting (XSS) vulnerability caused by insufficient encoding of user-controlled inputs. The root cause is failure to properly filter/encode user-submitted input, allowing a remote attacker...